This privacy policy applies to (a) our marketing website at nuqo.io and (b) our application at app.nuqo.io and the related API (backend.nuqo.io). The following sections indicate which information relates to the website and which to the application.
The following information provides a simple overview of what happens to your personal data when you visit our website or use our application.
Data processing on the website and in the application is carried out by the operator (see Controller section).
Some of your data is collected when you provide it to us (e.g. via the contact form). Other data is collected automatically when you visit the website by our IT systems (e.g. server logs, cookies and analytics tools where you have given consent).
When you use the application, we collect account data (e.g. email, name, profile), quote and customer project information, documents you upload (e.g. BOMs, drawings), and usage data and events necessary for the operation and improvement of the service.
Our marketing website (nuqo.io) and our application backend (backend.nuqo.io) are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Hetzner is a German company with data centres in Germany and Finland. Processing takes place exclusively on servers in Germany, so your data is subject to European data protection standards.
Further information on data protection at Hetzner is available at: https://www.hetzner.com/legal/privacy-policy
For security reasons, this site uses SSL or TLS encryption. You can tell that a connection is encrypted when the browser address bar changes from "http://" to "https://" and by the lock icon in your browser bar.
Nuqo GmbH
Körnerstrasse 10
13585 Berlin
Germany
Email: info@nuqo.io
Personal data is disclosed to the following recipients or processors:
The processing of personal data is based on Art. 6(1) GDPR:
You have the following rights vis-à-vis us:
Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Server log files are deleted after 7 days (see Server log files section). Contact form data is deleted when it is no longer required for the purpose. We retain account data and data in the application (quotes, uploaded documents) until you delete your account or request deletion, unless statutory retention obligations apply.
The provider of the pages automatically collects and stores information in server log files:
This data is collected to ensure the operation of the website (Art. 6(1)(f) GDPR). It is not merged with other data sources. The data is deleted after 7 days.
The following services are used only on our marketing website (nuqo.io).
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of how the website is used.
The information generated by the cookie is usually transferred to a Google server in the United States. We have enabled IP anonymisation so that your IP address is truncated within the EU before transfer where applicable.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can prevent the storage of cookies by adjusting your browser settings accordingly.
We use Hotjar to better understand our users' needs and to improve our offering. Hotjar is a technology service provided by Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta.
Hotjar records mouse movements, clicks, and scrolling behaviour. No personal data such as name, email address, or IP address is collected. The legal basis is your consent (Art. 6(1)(a) GDPR).
If you send us enquiries via the contact form on the marketing website, the information you provide in the form, including the contact details you enter there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.
Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling your enquiry). The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
Some of the recipients listed above (e.g. Google, OpenAI, Microsoft, PostHog) have their headquarters or data centres in third countries (e.g. the USA). Where we transfer data there, we do so on the basis of an EU Commission adequacy decision, standard contractual clauses (SCCs), or other recognised safeguards under Art. 44 ff. GDPR.